Security Consultant - DLP/EDR/SIEM

Qualifications :

- Bachelor's in Computer Science or Relevant Experience.

- 5+ Years of Experience in IT Security.

Responsibilities :

- Define and maintain security monitoring, threat detection, and incident response policies and procedures.

- Establish and mature a threat intelligence program, incorporating tactical and strategic threat feeds.

- Align SOC operations with evolving business risk priorities and regulatory frameworks.

Platform & Toolset Management :

- Evaluate, implement, and enhance SIEM, EDR, and DLP tools.

- Correlation and rule effectiveness.

- Assess and manage deployment of SIEM, EDR, and DLP, update incident response playbooks and automation workflows.

- Ensure consistent platform hygiene and technology stack effectiveness across SOC tooling.

SOC Operations & Threat Detection :

- Lead and coordinate proactive threat hunting across networks, endpoints, and cloud.

- Ensure timely and accurate incident reporting in compliance

- Retain logs in accordance with regulatory data retention mandates.

- Enforce and monitor security baselines for endpoints, in line with internal and regulatory standards.

- Review and track SOC effectiveness through KPIs, metrics, and regular reporting dashboards.

- Collaborate with internal teams to ensure the timely resolution of security issues.

- Participate in vulnerability management and patch validation activities.

- Contribute to the continuous improvement of security processes and controls.

- Investigate and respond to security breaches and incidents, documenting the findings and actions taken.